Approved changes feed: RSS · Atom

cpe:2.3:a:snowplow:stream_collector:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSnowplow (64ff7308-0791-52a2-bdaf-cfbe7dab1727)
ProductStream Collector (6301504f-ee79-55f7-8135-f86ba77703b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/snowplow/stream-collector purl2cpe 2026-06-01 10:15:32.875402

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-56528 vulnerable 2026-06-08 06:56:12.760076 Details available
This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and can render it unresponsive to the rest of the requests. As a result, data would not enter the pipeline and would be potentially lost.
Published: 2025-04-03T00:00:00.000Z
Updated: 2025-04-07T18:54:12.068Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.